Security Engineer
Current- Conducts application penetration testing, dynamic analysis, and vulnerabilitymanagement focusing on the OWASP Top 10 to identify and prioritize risks.- Identifies vulnerabilities like XSS, SQLi and insecure deserialization across a dozencustomer-facing web apps to recommend risk-based security controls.- Leveraged PTES framework to perform gap analysis of organization's securitycontrols, evaluating efficacy of existing tools and policies against adversary tacticsand techniques.- Maintains technical skillset through on-demand or in-person training, viaattending security conferences like BSides, or obtaining new certifications.